MetaCart Sign in to MyCiteSeerX

Include Citations | Advanced Search | Help

Disambiguated Search | Include Citations | Advanced Search | Help

Distributed Metastasis: A Computer Network Penetration Methodology (1999) [2 citations — 0 self]

by Andrew J. Stewart
Phrack Magazine, Vol 9, Issue
Add To MetaCart

Abstract:

Metastasis refers to the process by which an attacker propagates a computer penetration throughout a computer network. The traditional methodology for Internet computer penetration is sufficiently well understood to define behavior which may be indicative of an attack, e.g. for use within an Intrusion Detection System. A new model of computer penetration : distributed metastasis, increases the possible depth of penetration for an attacker, while minimizing the possibility of detection. Distributed Metastasis is a non-trivial methodology for computer penetration, based on an agent based approach, which points to a requirement for more sophisticated attack detection methods and software to detect highly skilled attackers. 1 Introduction In the study of medicine, the term `metastasis' refers to the spread of cancer from its original site to other areas in the body. Metastasis is the principal cause of death in cancer patients. Cancer cells have the ability to enter the vascular system a...

Citations

111 The Internet Worm Program: An Analysis – Spafford - 1988
22 Smashing The Stack For Fun And – One - 1996
16 A System for Discovering Network Characteristics and Problems – Wood, Coleman, et al. - 1993
12 Firewalking: A traceroute-like analysis of IP packet responses to determine gateway access control lists. http://www. packetfactory.net/firewalk – GOLDSMITH, SCHIFFMAN - 1998
6 Foiling the Cracker; A Survey of, and Improvements to Unix Password Security – Klein - 1990
2 Wietse Venema “Improving the Security of Your Site by Breaking Into it”, ftp://ftp.porcupine.org/pub/security/admin-guide-to-cracking.101.Z – Farmer - 1993
1 Project Loki’, Phrack 49, File 06 of 16 – Schiffman - 1996
1 Security Monitoring in Heterogeneous Globally Distributed Environments – Venables - 1999